01.30.03

How to do stuff on OSX when net config changes

Posted in Apple at 7:12 pm by Craig

I’ve been searching for this — basically I wanted to have a bunch of stuff kick off to reconfigure non-builtin things when I change locations using the FruitMenu “Locations” menu (or through the network control panel if no fruitmenu). I knew the answer would be somewhere within the configd docs (I like configd a lot from what I’ve seen of it). Well, the short answer is discussed on this page: http://www.culater.net/osd/samba/samba.html. Very applicable to doing things other than just restarting Samba. Nifty.

01.29.03

Expectant mother carrying alien baby

Posted in General at 8:23 pm by Craig

Doctors confirmed today that Erica Hughes, of Menlo Park, CA, is carrying an alien baby. This came as something of a surprise to Craig Hughes, who had thought he was the father.

Note the ridged forehead and funky eyes which prove conclusively that we’re not alone in the Universe.

Scary alien baby

Some more normal pictures:

Good, only 5 fingers

More baby pics

Yet more baby pics

New anti-spam effort

Posted in General at 1:10 am by Craig

Looks like a new (its new to me anyway) anti-spam effort is getting underway. ASSP looks like multi-word bayesian plus whitelists or something, in an SMTP relay.

01.25.03

PPTP and NAT

Posted in General at 3:54 am by Craig

So I passed a fun night last night trying to get my iptables NAT box to forward PPTP properly so I could log in to the office VPN from my wireless laptop while at home. All the instructions seemed fairly straightforward, but in practice things didn’t go as smoothly as they might. First, though it compiled OK, I couldn’t get my kernel and its modules to load properly (2.4.20) — eventually figured out it was a problem with the generated System.map file — fixed that, then tried to use the patch-o-matic to apply some iptables patches including the conntrack-pptp stuff. After applying the patches, again everything compiled fine, and now the modules were even loading right. But when I tried to

iptables -t nat -A POSTROUTING -j MASQUERADE

It just gave me a nondescript failure message. Even using lots of -v flags didn’t yield much insight. Eventually, I figured out what was happening: the Mandrake RPMS for iptables were installing binaries in /sbin and libs in /libs, where the iptables built from tarfile defaulted to installing in /usr/local/sbin — and then when I redirected the install directory the first time, I accidentally used /usr/sbin — so it kept not picking up the new userspace binaries, and so user< ->kernel communication kept flaking out. Anyway, all’s well that ends well. Once I got everything compiling, and got MASQUERADE working again, it was just a simple matter of realizing that the kernel wasn’t autoloading either the pptp nor the gre stuff — a small handful of modprobes later and I was browsing the work network.

Sheer idiocy

Posted in General at 2:48 am by Craig

Some people are not so smart when installing spam filters.

AT&T messes up

01.24.03

Finally got 2.4.20 working!

Posted in General at 9:17 am by Craig

So I was having big problems with undefined symbols in my newly built kernel modules when I ran depmod — I finally figured out how to solve this problem just now. Apparently System.map isn’t being generated correctly any more — possibly because of my version of gcc or something, but anyway, I booted single-user into the newly compiled kernel after building it and pointing lilo at it. I had already built and installed the modules (install gave shitloads of undefined symbols during depmod). Now, in single-user mode, I did a

cat /proc/ksyms > /boot/System.map-2.4.20 [which was already linked to /boot/System.map]

And now low and behold, it all works!

House inspections

Posted in General at 6:02 am by Craig

We had the big inspection on the new house today — everything looks pretty good. Doesn’t seem to be falling down the hill, all the walls are there, roof isn’t apparently leaking, etc. A few minor things, plus the main deck outside is somewhat rotten and will need some pretty extensive repair work done on it, but otherwise everything’s looking pretty good. So we’re on target to move in ~Feb 20th.

01.22.03

Sweet alumni tracker

Posted in General at 3:11 am by Craig

Stanford has added a very cool feature to the alumni web site: six-degrees-of-alumni-bacon.

Link is here if you happen to be an alumnus and haven’t seen it yet. My userid at the site is just “craig” if you want to link to me.

01.21.03

Looking for OSX ethertap equivalent

Posted in Apple at 11:20 pm by Craig

So Network Associates has (IMHO) some badly misconfigured firewalls, which don’t let most kinds of traffic *out*. Now some of these rules are really odd. For example IMAP is OK, but IMAPS is blocked. More or less all UDP is blocked. Pretty much everything else is blocked. So, if I were running linux, I’d just set up an ethertap, then have the remote end of the tap tunnelling through to my house over an SSH connection (they do allow outbound SSH) and then route everything locally through the tap. Trouble is, my laptop is running OSX — and I can’t find any docs on how to set up an ethernet tap equivalent there. I have found the Firewall-piercing mini-HOWTO, so maybe that will have some suggestions for alternatives which I can make work on OSX.

Ducky’s spam conference summary

Posted in General at 4:45 am by Craig

Ducky posted a useful summary of the spam conference from last friday. Sounds like some useful discussion was had, though much of what was covered is already more or less built in to SpamAssassin. One area of surprising focus was the fact that the spammers seem to be getting smarter. Probably means that some effort needs to be put into an auto-update ability for SA.

« Previous entries